Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
File:                     CqAPpYxAjQbIlNjrrzidTFAQVEM.mft (raw, json)
Hash identifier:          evgrQtbwUlgdvMxPaVrDSbk7ddZJxu7FCb7cwQX8zEk=
Subject key identifier:   27:2C:AD:A5:8D:5F:A3:71:35:0A:93:F8:13:12:26:2F:7B:E2:C3:68
Authority key identifier: 0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43
Certificate issuer:       /CN=A91D9C95/serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
Manifest number:          20
Signing time:             Fri 03 Jul 2026 09:47:31 +0000
Manifest this update:     Fri 03 Jul 2026 09:47:31 +0000
Manifest next update:     Fri 10 Jul 2026 09:47:31 +0000
Files and hashes:         1: CqAPpYxAjQbIlNjrrzidTFAQVEM.crl (hash: 87hC/8JbbuPN7s34X/h9+7jhnXe5U1hP2UaVNerj5Vk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl
                          rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Jul 2026 09:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9C95, serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
        Validity
            Not Before: Jul  3 09:47:31 2026 GMT
            Not After : Jul 10 09:47:31 2026 GMT
        Subject: CN=6a478533-a2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:0a:74:9d:7d:f9:3f:6c:14:88:c4:43:73:
                    33:be:4c:33:0c:0a:b1:ce:24:9e:15:0e:fb:1b:61:
                    bb:70:ca:6e:ba:58:78:b4:ba:60:17:db:d6:22:24:
                    c8:7a:02:ee:f3:ff:c8:83:ee:5d:1b:39:70:41:73:
                    18:5b:4f:09:33:f7:40:35:2f:c5:f5:ab:85:15:78:
                    a2:f3:a8:a9:17:9a:fc:1a:b9:c2:02:87:46:aa:35:
                    80:35:bf:b1:a4:b7:51:bc:85:ea:dd:07:62:39:d3:
                    8c:cc:ba:66:c3:20:72:08:03:62:86:43:cf:ea:22:
                    f3:ce:03:1a:24:f8:f6:c0:19:01:5e:8b:1c:82:d9:
                    bc:d7:3f:04:9a:97:98:f7:9a:69:aa:9b:7e:ab:cc:
                    5c:3c:78:36:80:60:1b:5a:7f:db:8e:2b:0c:30:b5:
                    81:a3:7a:c1:9c:1b:b9:ea:57:8a:f8:d8:95:f1:f0:
                    d0:da:0a:5a:28:c2:05:ae:ef:7d:3e:30:2a:7a:b5:
                    de:09:ec:af:55:e1:4c:dc:67:1a:a3:a4:5d:00:44:
                    5d:db:c0:87:eb:3d:f4:10:47:18:b2:6e:de:66:36:
                    df:6a:22:05:af:ff:e6:21:eb:ff:fa:b7:ee:7c:c8:
                    e2:cb:58:82:a8:de:e0:d6:46:b3:c6:08:45:81:5b:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2C:AD:A5:8D:5F:A3:71:35:0A:93:F8:13:12:26:2F:7B:E2:C3:68
            X509v3 Authority Key Identifier:
                keyid:0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ed:b3:29:12:e7:1e:ae:b3:0f:64:dd:e3:98:e3:29:a8:6a:
         f7:c6:b0:b2:a8:84:53:43:13:ae:1d:92:9f:f9:b3:4b:c9:50:
         05:4d:9c:f6:98:40:b8:58:c1:b1:3b:69:7a:ea:97:7f:97:7e:
         fe:8b:c9:7a:f7:d5:76:e4:50:51:f8:fb:73:94:a3:9b:6e:29:
         76:19:7a:d1:49:56:19:01:5f:3c:13:29:db:55:08:9f:40:d8:
         6a:dd:d5:7a:81:97:58:97:24:e1:03:c4:e7:67:63:46:ea:03:
         06:85:b6:93:4f:33:0f:9e:2b:a2:d5:fd:8b:8c:7a:d2:75:61:
         29:66:3d:ba:3a:ab:93:44:53:9e:4c:b0:1c:6c:6b:6f:e3:0e:
         ea:d4:2b:63:72:67:4b:18:7a:3c:19:74:8f:b1:01:fa:fb:39:
         28:fc:b1:15:6d:0c:ea:1b:63:b0:b0:d6:ad:4c:a2:99:7d:d0:
         fd:eb:16:29:6d:c9:9b:3e:c7:25:b8:4e:be:5f:a6:f7:56:e4:
         36:87:e9:8b:51:ad:83:38:31:32:2a:bb:e3:22:dd:e7:79:96:
         61:08:c8:4a:23:18:c4:02:a9:fc:f3:65:c0:72:88:16:f5:cb:
         38:8a:1c:fe:14:6d:88:dd:45:64:36:21:f5:fa:ad:b0:65:f8:
         3a:ef:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:35:45 2026 by rpki-client